Privacy

ThreadGrid runs AI agents on your own computers. Your repositories, prompts, code and AI provider credentials stay on your devices and are not uploaded to ThreadGrid. Using ThreadGrid on a single computer doesn't need an account at all.

What our cloud stores

If you create an account, we keep what it needs to work:

• your name, email address, sign-in methods and active sessions;
• if you sign in with GitHub, Google or Apple, the basic profile and email that provider shares with us;
• if you allow notifications on your iPhone, an Apple push token for that phone and an identifier for it, so we can deliver notifications.

The list of phones and computers paired with yours, their keys, and everything your agents do are kept on your computer, not in our cloud.

Your devices talking to each other

When your phone and computer, or two of your computers, talk through our relay, the messages are end-to-end encrypted: our servers pass them along but can't read them, and don't store them. The relay does see which of your devices are online, and the size and timing of messages. On the same Wi-Fi, your phone connects to your computer directly instead, still encrypted.

Notifications carry no details, only fixed messages like “An agent is waiting for your approval.” Your phone fetches the details from your computer over the encrypted connection.

AI providers

ThreadGrid starts the AI tools you already use (such as Claude, Codex or OpenCode) with your own logins. What those tools send to their providers is governed by the providers’ own terms and privacy policies. ThreadGrid doesn’t send your work to them or anywhere else on its own.

Diagnostics

Two things in Settings → Privacy are off unless you turn them on. Neither ever includes prompts, code, file names or paths, or your account.

• Crash reports: when the app crashes or hits an unexpected error, the error type, a message and stack trace with anything personal removed, the app version and your operating system. They go to our own error tracker (GlitchTip).
• Usage counts: once a day, how many times you did things like start a thread, send a message or answer an approval, with the app version and operating system, under a random ID that isn’t linked to your account and is deleted when you turn this off.

Our servers also report their own errors to GlitchTip, without request contents. The app keeps a local log with secrets removed; “Export diagnostics” saves a report to a file you choose, and it’s only shared if you send it to us. Feedback you send from the app is emailed to us and not stored in our database.

Services we rely on

• Cloudflare, which carries traffic to our website and API, and stores app downloads and our database backups;
• Resend, which sends sign-in and account emails;
• Apple, for Sign in with Apple and iPhone notifications;
• GitHub and Google, only if you choose to sign in with them.

Our database runs on servers we operate and is backed up daily, encrypted at rest.

Your choices

You can remove a paired phone or computer at any time. You can ask us to export or delete your account and its data; deleting removes it from our database, and backups roll off on our backup schedule.

Contact

Questions, or a request to export or delete your data: [email protected].